Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/df5385bc-7c9f-361d-8431-48648c5562f2.roa
File: df5385bc-7c9f-361d-8431-48648c5562f2.roa (raw, json)
Hash identifier: ZXA92XL5mbGJGJ9rMl0IS7yJ5oG1JS3npOtBI+VydZM=
Subject key identifier: B7:86:A2:AE:FA:02:23:D3:9E:9E:E2:89:E3:13:E2:4F:2A:83:4F:45
Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial: 010D0C9F4328584827C5332AB7ED8DCC988D1A80
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/df5385bc-7c9f-361d-8431-48648c5562f2.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 6643
IP address blocks: 173.199.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:33:2a:b7:ed:8d:cc:98:8d:1a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=ac843f96-ec3d-49e5-af9a-b9c5bb66586f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c9:06:de:7d:6f:ee:1f:7b:cd:6c:69:d5:4b:
c3:a4:1a:4b:cb:09:04:0d:ec:44:39:11:4e:a7:38:
6a:01:06:b2:7b:b0:ce:93:04:b8:52:08:80:60:92:
a1:60:33:a5:c6:1b:bb:05:0a:0c:e8:3d:fa:8c:fa:
18:fb:d4:72:c3:0b:33:23:1d:96:9c:b2:36:3d:22:
b3:46:d5:ef:af:f8:76:05:1c:0d:86:e5:fa:f2:dd:
11:51:0d:bf:4c:33:6d:22:31:c3:13:be:6f:9d:7e:
66:a4:2d:86:5c:8a:55:09:58:dc:ad:81:69:10:ec:
84:5f:ce:a6:3d:51:0b:38:4d:6e:4c:43:39:27:c1:
5b:68:e1:5f:8a:7d:ff:c9:70:ce:5e:8d:91:44:c5:
2d:40:aa:85:b9:78:bf:cd:04:90:0b:96:a4:85:14:
37:39:4d:6e:3f:81:18:d2:f6:62:84:72:ca:10:55:
56:43:9b:97:83:6f:ba:05:e4:0e:38:83:b0:78:e4:
24:28:9b:ed:f6:e0:95:67:de:be:28:5f:99:1c:99:
e4:37:a6:3f:98:58:01:81:80:7d:c9:e4:83:ac:ec:
48:eb:55:87:fc:09:a9:be:2c:3f:47:7d:63:49:f3:
9a:bb:85:c8:99:d2:50:ef:56:bc:d7:6b:c5:7d:c1:
22:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:86:A2:AE:FA:02:23:D3:9E:9E:E2:89:E3:13:E2:4F:2A:83:4F:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/df5385bc-7c9f-361d-8431-48648c5562f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
X509v3 Authority Key Identifier:
keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
sbgp-ipAddrBlock: critical
IPv4:
173.199.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c2:b8:83:00:c7:72:89:d2:d0:2a:86:69:16:58:ee:3e:ce:0e:
c6:2b:76:51:3c:6d:87:1a:d9:3a:b6:d6:66:88:22:7c:20:04:
05:7f:88:dc:ce:a8:01:30:1d:a0:18:72:ff:62:4d:9a:ef:aa:
ba:f5:3c:17:10:d6:ae:cd:b7:a5:02:53:16:2e:48:29:50:ab:
b7:29:3d:27:80:70:7b:1b:20:38:54:47:72:b7:95:c2:e6:d5:
1d:45:47:ca:46:73:19:87:41:7b:6b:65:d5:06:7f:b9:05:a9:
21:8b:05:44:9b:8e:b3:e7:7f:41:50:75:05:98:cd:6d:c1:0e:
5d:c5:71:ac:ab:a8:5f:b5:5f:84:5f:e3:1b:1c:17:ce:7f:f3:
82:16:c0:67:62:89:81:77:0a:37:4e:8c:2c:46:3a:ce:09:5d:
7f:c6:49:bb:c3:0d:47:da:77:e7:be:86:64:11:5c:52:93:8e:
9f:1a:ed:6a:bd:c7:8e:68:0d:72:59:44:a7:fb:61:a4:9f:52:
e3:60:71:37:f5:d7:51:ee:26:58:af:ed:80:fb:5e:11:e5:db:
5c:bc:e5:97:07:8f:a0:65:9b:19:c5:3f:82:2f:4a:2e:56:91:
80:6c:5e:44:10:95:2f:be:49:17:d7:40:4e:9b:53:98:6e:a1:
d0:7f:c5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:31:55 2025 by rpki-client